Static task
static1
Behavioral task
behavioral1
Sample
Quotation.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Quotation.exe
Resource
win10v2004-20231023-en
General
-
Target
7c7060159fb904e634c34229dcd4d1f976b87fd37df8012ac98123e77f8e856f
-
Size
674KB
-
MD5
8e7849f5baaaebfdbc6bcd22a587fa7b
-
SHA1
6335927095bfcd09be56914926a1c5651554779d
-
SHA256
7c7060159fb904e634c34229dcd4d1f976b87fd37df8012ac98123e77f8e856f
-
SHA512
5c5dbe00c38fb36f101583f271fba25ee0693cd4f3d5ed645f4681a38da38d215b438189b5dde7e13f15f10c503fbc1946891c98ac8d86011f51e9b3ab58e702
-
SSDEEP
12288:IKLXQDritCYGaJYzRIvV1hqrl8xU4iDxZABbB5702s9pit6:Itrv+yWvAQiDxZw+2k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Quotation.exe
Files
-
7c7060159fb904e634c34229dcd4d1f976b87fd37df8012ac98123e77f8e856f.zip
-
Quotation.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 799KB - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ